Results (page 1): cookie authentication and random numbers 



Page 1 of 7 




I srlbe (Full Service) Register (Limited Service, «■ v ) v 

Search : <•• The ACM Digital Library C The Guide 



cookie authentication and random numbers F 
Terms used: cookie authentication random numbers 

sort results |'i'eie7ance ▼! ^Save results to a Binder Refine these results with / 

by » Try this search in me A.CN 

Dls P |av l^xpandeTd^rrrT'^Si f" Open results in a new window 

results i r 

Results 1 - 20 of 113 Result page: 1 2 3 4 5 6 next >> 

1 " o s N - , s ° N \ -\ N N , N ^ N s N ° 0 " % *> , \v v 'a 
Ezedin S. Barka, Emad Eldin Mohamed, Kadhim Hayawi 

July 2006 I WCMC '06: Proceedings of the 2006 international conference on Wireless 

communications and mobile computing 
Publisher: ACM 

Full text available: ^j3df(235 : 37 KB} Additional Information: fell. citation, abstract, references, ind^exter.fris 
Bibliometrics: Downloads (6 Weeks): 18, Downloads (12 Months): 233, Citation Count: 0 
The advances in the wireless technology, represented by the improved computational 
capabilities of third generation (3G) and fourth generation (4G) wireless devices and the 
wider bandwidth wireless networks, make it possible to support a variety of security- 
sensitive ... 
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The overall increase in traffic on the World Wide Web is augmenting user-perceived lnv 

response times from popular Web sites, especially in conjunction with special events. Bo 

System platforms that do not replicate information content cannot provide the needed ... vvw 
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COCA is a fault-tolerant and secure online certification authority that has been built and 
deployed both in a local area network and in the Internet. Extremely weak assumptions 
characterize environments in which COCA'S protocols execute correctly: no ... 
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We describe Just Fast Keying (JFK), a new key-exchange protocol, primarily designed for 
use in the I P security architecture. It is simple, efficient, and secure; we sketch a proof of 
the latter property. JFK also has a number of novel engineering parameters ... 
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This article presents a survey of denial of service attacks and the methods that have 
been proposed for defense against these attacks. In this survey, we analyze the design 
decisions in the Internet that have created the potential for denial of service ... 
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We describe reference implementations for selected configurations of the user 
authentication protocol defined by the Information Card Profile V1.0. Our code can 
interoperate with existing implementations of the roles of the protocol (client, identity ... 
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TLS is the protocol of choice for securing today's e-commerce and online transactions but 
adding TLS to a Web server imposes a significant overhead relative to an insecure Web 
server on the same platform. We perform a comprehensive study of the performance ... 

Keywords: Internet, RSA accelerator, TLS, e-commerce, secure Web servers 
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How does a machine know who is using it? Current systems authenticate their users 
infrequently, and assume the user's identity does not change. Such persistent 
authentication is inappropriate for mobile and ubiquitous systems, where associations ... 
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The focus of access control in client/server environments is on protecting sensitive server 
resources by determining whether or not a client is authorized to access those resources. 
The set of resources is usually static, and an access control policy ... 
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Welcome to the Northern Kentucky area and the 38th SIGCSE Technical Symposium on 
Computer Science Education. We are pleased to present the proceedings of SIGCSE 2007. 
It includes papers, panels, special sessions, posters, workshops, and birds-of-a- 
feather ... 



Paul C. Van Oorschot, Stuart Stubblebine 

August 2006 ACM Transactions on I nformation and System Security (Tl SSEC), Volume 

9 Issue 3 

Publisher: ACM 

Full text available: "^|pdf{305. 9? KB) Additional Information: full citation, aDsiract, references, index terms 
Bibliometrics: Downloads (6 Weeks): 15, Downloads (12 Months): 158, Citation Count: 1 
Automated Turing Tests (ATTs), also known as human-in-the-loop techniques, were 
recently employed in a login protocol by Pinkas and Sander (2002) to protect against 
online password-guessing attacks. We present modifications providing a new history- 
based ... 
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protocols, relay attack, usable security 
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This paper addresses the identifier ownership problem. It does so by using characteristics 
of Statistical Uniqueness and Cryptographic Verifiability (SUCV) of certain entities which 
this document calls SUCV Identifiers and Addresses, or, alternatively, ... 

Keywords: Security, address ownership, authorization, group management, mobile 
IPv6, opportunistic encryption 
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The standard solution for user authentication on the Web is to establish a TLS-based 
secure channel in server authenticated mode and run a protocol on top of TLS where the 
user enters a password in an HTML form . However, as many studies point out, the ... 
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Tarzan is a peer-to-peer anonymous I P network overlay. Because it provides I P service, 
Tarzan is general-purpose and transparent to applications. Organized as a decentralized 
peer-to-peer overlay, Tarzan is fault-tolerant, highly scalable, and easy to ... 

Keywords: IPtunnels, anonymity, cover traffic, distributed trust, mix-nets, overlay 
networks, peer-to-peer 
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The Post-PC revolution is bringing information access to a wide range of devices beyond 
the desktop, such as public kiosks, and mobile devices like cellular telephones, PDAs, and 
voice based vehicle telematics. However, existing deployed Internet services ... 

Keywords: internet, middleware, post-PC, security, transcoding 
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Edited by Peter G. Neumann (Risks Forum Moderator and Chairman of the ACM 
Committee on Computers and Public Policy), plus personal contributions by others, as 
indicated. Opinions expressed are individual rather than organizational, and all of the 
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Internet applications currently have a choice between stream and datagram transport 
abstractions. Datagrams efficiently support small transactions and streams are suited for 
long-running conversations, but neither abstraction adequately supports applications ... 

Keywords: SST, TCP, best-effort, datagram, fairness, mobility, multimedia, reliable, 
stream, transport protocols, web transport 
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Internet applications currently have a choice between stream and datagram transport 
abstractions. Datagrams efficiently support small transactions and streams are suited for 
long-running conversations, but neither abstraction adequately supports applications ... 
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We describe JFK, a new key exchange protocol, primarily designed for use in the IP 
Security Architecture. It is simple, efficient, and secure; we sketch a proof of the latter 
property. JFK also has a number of novel engineering parameters that permit ... 
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A Web application is an application that is invoked with a Web browser over the Internet. 
Ever since 1994 when the Internet became available to the public and especially in 1995 
when the World Wide Web put a usable face on the Internet, the Internet ... 
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